Security and privacy, in plain words.
What we do to keep your organization’s data safe, what your admins control, and what we don’t do yet.
Protected on the way.
-
HTTPS everywhere
Pages, apps and files are served over HTTPS. Mail talks to mail servers over TLS and checks their certificates.
-
A firewall in front
Requests pass a firewall that blocks known attacks, and addresses that keep attacking are shut out.
-
Strict browser rules
Pages tell browsers to run only our own code, and other sites can’t put our pages in a frame.
Your accounts.
-
Passwords kept as hashes
We never store a password as it was typed. Passwords have at least 8 characters.
-
Two-step verification
A code from an authenticator app at sign-in. Admins can require it for everyone.
-
Sign out everywhere
Sign out of every other device at once from your account.
-
Mail without passwords
Google and Microsoft 365 mailboxes connect by signing in with the provider. Only its tokens are kept, encrypted.
What your admins control.
From Security and Apps in Broos Workspace Admin.
Rules for your whole organization.
Your admins set the rules once, and every app follows them.
- Sharing outside: allowed, only with certain domains, or not at all
- Whether guests can join meetings
- Two-step verification for everyone
- How long passwords must be and how long sign-ins last
- An audit log of every admin action
- Suspending someone at once, and exporting your organization’s data
Kept apart, and private.
-
Organizations kept apart
People, files, channels, events and contacts of one organization never appear in another’s, in any app.
-
Support access is recorded
If the Broos team needs to look into your organization to help you, it’s with a reason, recorded and visible to your admins.
-
AI only when you turn it on
Writing help is off until an admin turns it on. When it’s on, the text you ask about is sent to the AI provider set up for it.
-
Cookies with your say
This site uses the cookies it needs to work, and analytics or marketing cookies only if you agree.
What we don’t do yet.
Questions about security
Where is our data stored?
On servers Broos Action runs for Broos Workspace. Ask us for the location and the details your compliance team needs.
Can we get all our data out?
Yes. Admins can export your organization, files download as they are, and documents stay Office files.
How do I report a security problem?
Write to us through the contact page and choose Security or privacy. Please give us a chance to fix it before telling others.
Questions your security team wants answered?
Tell us what you need to know, and we’ll answer plainly.